@shopware/api-gen 1.5.2 → 1.5.3

package/README.md

@@ -99,6 +99,14 @@ export type operations = {
 > [!IMPORTANT]  
 > Overriding components or operations in the TS files requires you to have a full object definitions!
 
+Override-only projects (extra plugin endpoints, no local OpenAPI JSON) should
+import components from `@shopware/api-client/store-api-types` and merge the
+overlay in `shopware.d.ts` with `WithApiOverrides` from `@shopware/api-client`.
+That keeps StackBlitz working without committing a generated `storeApiTypes.d.ts`.
+See the [api-client TypeScript overrides](https://www.npmjs.com/package/@shopware/api-client) docs.
+When you do run `generate`, it still applies the same overlay onto whatever base
+schema it resolved (local JSON, or the types shipped with the api-client).
+
 ### Partial overrides
 
 There is a possiblity to add patches (partial overrides) to the schema. Partial overrides are applied directly to the JSON schema, so the syntax needs to be correct. It can then be used by the backend CI tool to validate and apply these patches directly to the schema to fix inconsistencies.
@@ -401,9 +409,9 @@ await split({
 
 Full changelog for stable version is available [here](https://github.com/shopware/frontends/blob/main/packages/api-gen/CHANGELOG.md)
 
-### Latest changes: 1.5.2
+### Latest changes: 1.5.3
 
 ### Patch Changes
 
-- Updated dependencies [[`183c183`](https://github.com/shopware/frontends/commit/183c183f905486c27fa770fd0f4cd9993e86c20e), [`458494e`](https://github.com/shopware/frontends/commit/458494e8bd2be88d4fbf161636a109c8f4efc443)]:
-  - @shopware/api-client@1.6.0
+- Updated dependencies [[`44ece9d`](https://github.com/shopware/frontends/commit/44ece9dac2e4d0248c2270f7eff496c258632f5b), [`4b43e64`](https://github.com/shopware/frontends/commit/4b43e64a8d78be6eca1f8d9c24140e046193af41)]:
+  - @shopware/api-client@1.7.0

package/dist/cli.mjs

@@ -1,6 +1,6 @@
 import yargs from 'yargs';
 import { hideBin } from 'yargs/helpers';
-import { a as getAugmentedNamespace, f as formatSource, g as generate, l as loadSchema, v as validateJson } from './shared/api-gen.DDkIkZIo.mjs';
+import { a as getAugmentedNamespace, f as formatSource, g as generate, l as loadSchema, v as validateJson } from './shared/api-gen.DwUlbL4g.mjs';
 import { mkdirSync, writeFileSync } from 'node:fs';
 import { resolve as resolve$2 } from 'node:path';
 import require$$0$5 from 'fs';
@@ -32,7 +32,7 @@ import __cjs_mod__ from 'module';
 const __filename = __cjs_url__.fileURLToPath(import.meta.url);
 const __dirname = __cjs_path__.dirname(__filename);
 const require = __cjs_mod__.createRequire(import.meta.url);
-const version$1 = "1.5.2";
+const version$1 = "1.5.3";
 const packageJson = {
 	version: version$1};
 
@@ -153,6 +153,26 @@ function requireBraceExpansion () {
 	// characters) so legitimate input is unaffected.
 	var EXPANSION_MAX_LENGTH = 4000000;
 
+	// `expand` recurses once per level of brace *nesting* - both when expanding a
+	// set's comma members and when re-wrapping a set whose body is a single part.
+	// The CVE-2026-14257 fix made the *tail* iterative (recursion on `m.post`, one
+	// level per chained group), which left nesting depth unbounded: about 3,100
+	// levels of `{{{...a,b...}}}` - only ~6KB of input - exhausted the native stack
+	// and crashed the process. `EXPANSION_MAX_DEPTH` bounds how deep the parser
+	// will follow nesting. It sits far above any realistic pattern and well below
+	// the depth at which the stack runs out.
+	var EXPANSION_MAX_DEPTH = 1000;
+
+	// Bash keeps a quirk where a brace group followed by a comma set still expands
+	// (`{a},b}`). The parser implements it by rewriting the string and restarting
+	// the scan, absorbing one `}` per pass. `n` trailing braces therefore cost `n`
+	// full passes over a string that itself grows by one `escClose` sentinel each
+	// time - quadratic in `n`, with a ~26x constant from the sentinel's length.
+	// 128KB of `'{a}' + '}'.repeat(n) + ',z}'` blocked the event loop for 27
+	// seconds to produce two results. `EXPANSION_MAX_REWRITES` bounds how many
+	// times the scan may restart. Real `{a},b}` input needs a handful.
+	var EXPANSION_MAX_REWRITES = 1000;
+
 	function numeric(str) {
 	  return parseInt(str, 10) == str
 	    ? parseInt(str, 10)
@@ -176,34 +196,54 @@ function requireBraceExpansion () {
 	}
 
 
+	// Like `target.push(...items)` but doesn't overflow the stack
+	function pushAll(target, items) {
+	  for (var i = 0; i < items.length; i++) {
+	    target.push(items[i]);
+	  }
+	}
+
 	// Basically just str.split(","), but handling cases
 	// where we have nested braced sections, which should be
 	// treated as individual members, like {a,{b,c},d}
 	function parseCommaParts(str) {
-	  if (!str)
-	    return [''];
-
 	  var parts = [];
-	  var m = balanced('{', '}', str);
 
-	  if (!m)
-	    return str.split(',');
+	  // Walk the brace groups iteratively. Recursing on `post` once per group let a
+	  // chain of them exhaust the stack - the parsing-side counterpart to
+	  // the `expand` overflow fixed for CVE-2026-14257, and not something `max` or
+	  // `maxLength` can bound, since it happens before expansion.
+	  //
+	  // The part the next chunk continues
+	  var carry = '';
 
-	  var pre = m.pre;
-	  var body = m.body;
-	  var post = m.post;
-	  var p = pre.split(',');
+	  for (;;) {
+	    var m = balanced('{', '}', str);
 
-	  p[p.length-1] += '{' + body + '}';
-	  var postParts = parseCommaParts(post);
-	  if (post.length) {
-	    p[p.length-1] += postParts.shift();
-	    p.push.apply(p, postParts);
-	  }
+	    if (!m) {
+	      var tail = str.split(',');
+	      tail[0] = carry + tail[0];
+	      pushAll(parts, tail);
+	      return parts;
+	    }
+
+	    var pre = m.pre;
+	    var body = m.body;
+	    var post = m.post;
+	    var p = pre.split(',');
 
-	  parts.push.apply(parts, p);
+	    p[0] = carry + p[0];
+	    p[p.length-1] += '{' + body + '}';
 
-	  return parts;
+	    if (!post.length) {
+	      pushAll(parts, p);
+	      return parts;
+	    }
+
+	    carry = p.pop();
+	    pushAll(parts, p);
+	    str = post;
+	  }
 	}
 
 	function expandTop(str, options) {
@@ -213,6 +253,8 @@ function requireBraceExpansion () {
 	  options = options || {};
 	  var max = options.max == null ? EXPANSION_MAX : options.max;
 	  var maxLength = options.maxLength == null ? EXPANSION_MAX_LENGTH : options.maxLength;
+	  var maxDepth = options.maxDepth == null ? EXPANSION_MAX_DEPTH : options.maxDepth;
+	  var maxRewrites = options.maxRewrites == null ? EXPANSION_MAX_REWRITES : options.maxRewrites;
 
 	  // I don't know why Bash 4.3 does this, but it does.
 	  // Anything starting with {} will have the first two bytes preserved
@@ -224,7 +266,7 @@ function requireBraceExpansion () {
 	    str = '\\{\\}' + str.substr(2);
 	  }
 
-	  return expand(escapeBraces(str), max, maxLength, true).map(unescapeBraces);
+	  return expand(escapeBraces(str), max, maxLength, maxDepth, 0, maxRewrites, true).map(unescapeBraces);
 	}
 
 	function embrace(str) {
@@ -336,8 +378,18 @@ function requireBraceExpansion () {
 	  str,
 	  max,
 	  maxLength,
+	  maxDepth,
+	  depth,
+	  maxRewrites,
 	  isTop
 	) {
+	  // Too deeply nested to keep following: treat the rest as literal, the same
+	  // way a group that cannot expand is already handled. Truncating rather than
+	  // throwing keeps expansion total, matching `max` and `maxLength`.
+	  if (depth > maxDepth) {
+	    return [str];
+	  }
+
 	  // Consume the string's top-level brace groups left to right, threading a
 	  // running set of combined prefixes (`acc`). Expanding the tail iteratively -
 	  // rather than recursing on `m.post` once per group - keeps the native stack
@@ -350,6 +402,9 @@ function requireBraceExpansion () {
 	  // comma set - a sequence like `{a..\}` may legitimately yield ''. The drop
 	  // is on the final strings, so it is applied to whichever `combine` produces
 	  // them (the one with no brace set left in the tail).
+	  // How many times the `{a},b}` rewrite below has restarted the scan. Each pass
+	  // re-reads the whole string, so leaving this unbounded is quadratic.
+	  var rewrites = 0;
 	  var dropEmpties = false;
 	  var firstGroup = true;
 
@@ -385,7 +440,8 @@ function requireBraceExpansion () {
 	    var isOptions = m.body.indexOf(',') >= 0;
 	    if (!isSequence && !isOptions) {
 	      // {a},b}
-	      if (m.post.match(/,(?!,).*\}/)) {
+	      if (rewrites < maxRewrites && m.post.match(/,(?!,).*\}/)) {
+	        rewrites++;
 	        str = m.pre + '{' + m.body + escClose + m.post;
 	        isTop = true;
 	        continue;
@@ -413,7 +469,7 @@ function requireBraceExpansion () {
 	      var n = parseCommaParts(m.body);
 	      if (n.length === 1 && n[0] !== undefined) {
 	        // x{{a,b}}y ==> x{a}y x{b}y
-	        n = expand(n[0], max, maxLength, false).map(embrace);
+	        n = expand(n[0], max, maxLength, maxDepth, depth + 1, maxRewrites, false).map(embrace);
 	        //XXX is this necessary? Can't seem to hit it in tests.
 	        /* c8 ignore start */
 	        if (n.length === 1) {
@@ -447,7 +503,7 @@ function requireBraceExpansion () {
 	      values = [];
 	      var valuesLength = 0;
 	      outer: for (var j = 0; j < n.length; j++) {
-	        var expanded = expand(n[j], max, maxLength, false);
+	        var expanded = expand(n[j], max, maxLength, maxDepth, depth + 1, maxRewrites, false);
 	        for (var k = 0; k < expanded.length; k++) {
 	          var v = expanded[k];
 	          if (dropsEmpties && !v) continue
@@ -3124,19 +3180,28 @@ function requireLoader$1 () {
 	  }
 	}
 
+	function chargeMergeWork (state) {
+	  state.totalMergeKeys++;
+
+	  if (state.maxTotalMergeKeys !== -1 && state.totalMergeKeys > state.maxTotalMergeKeys) {
+	    throwError(state, 'merge keys exceeded maxTotalMergeKeys (' + state.maxTotalMergeKeys + ')');
+	  }
+	}
+
 	function mergeMappings (state, destination, source, overridableKeys) {
 	  if (!common.isObject(source)) {
 	    throwError(state, 'cannot merge mappings; the provided source object is unacceptable');
 	  }
 
+	  // Count the source mapping itself to bound sequences of empty mappings.
+	  chargeMergeWork(state);
+
 	  const sourceKeys = Object.keys(source);
 
 	  for (let index = 0, quantity = sourceKeys.length; index < quantity; index += 1) {
 	    const key = sourceKeys[index];
 
-	    if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) {
-	      throwError(state, 'merge keys exceeded maxTotalMergeKeys (' + state.maxTotalMergeKeys + ')');
-	    }
+	    chargeMergeWork(state);
 
 	    if (!_hasOwnProperty.call(destination, key)) {
 	      setProperty(destination, key, source[key]);
@@ -3179,6 +3244,10 @@ function requireLoader$1 () {
 
 	  if (keyTag === 'tag:yaml.org,2002:merge') {
 	    if (Array.isArray(valueNode)) {
+	      if (valueNode.length > 100) {
+	        throwError(state, 'abnormal merge sequence size');
+	      }
+
 	      for (let index = 0, quantity = valueNode.length; index < quantity; index += 1) {
 	        mergeMappings(state, _result, valueNode[index], overridableKeys);
 	      }

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { g as generate, l as loadSchema, v as validateJson } from './shared/api-gen.DDkIkZIo.mjs';
+export { g as generate, l as loadSchema, v as validateJson } from './shared/api-gen.DwUlbL4g.mjs';
 import 'node:fs';
 import 'node:path';
 import 'ofetch';

package/dist/shared/{api-gen.DDkIkZIo.mjs → api-gen.DwUlbL4g.mjs}

@@ -2272,7 +2272,7 @@ function getKeysOfEnumerableProperties(object, compareKeys) {
 * with spacing, indentation, and comma
 * without surrounding punctuation (for example, braces)
 */
-function printIteratorEntries(iterator, config, indentation, depth, refs, printer, separator = ": ") {
+function printIteratorEntries(iterator, config, indentation, depth, refs, printer, separator = ": ", length) {
 	let result = "";
 	let width = 0;
 	let current = iterator.next();
@@ -2282,7 +2282,7 @@ function printIteratorEntries(iterator, config, indentation, depth, refs, printe
 		while (!current.done) {
 			result += indentationNext;
 			if (width++ === config.maxWidth) {
-				result += "…";
+				result += typeof length === "number" ? `…(${length - width + 1})` : "…";
 				break;
 			}
 			const name = printer(current.value[0], config, indentationNext, depth, refs);
@@ -2304,7 +2304,7 @@ function printIteratorEntries(iterator, config, indentation, depth, refs, printe
 * with spacing, indentation, and comma
 * without surrounding punctuation (braces or brackets)
 */
-function printIteratorValues(iterator, config, indentation, depth, refs, printer) {
+function printIteratorValues(iterator, config, indentation, depth, refs, printer, length) {
 	let result = "";
 	let width = 0;
 	let current = iterator.next();
@@ -2314,7 +2314,7 @@ function printIteratorValues(iterator, config, indentation, depth, refs, printer
 		while (!current.done) {
 			result += indentationNext;
 			if (width++ === config.maxWidth) {
-				result += "…";
+				result += typeof length === "number" ? `…(${length - width + 1})` : "…";
 				break;
 			}
 			result += printer(current.value, config, indentationNext, depth, refs);
@@ -2345,7 +2345,7 @@ function printListItems(list, config, indentation, depth, refs, printer) {
 		for (let i = 0; i < length; i++) {
 			result += indentationNext;
 			if (i === config.maxWidth) {
-				result += "…";
+				result += `…(${length - i})`;
 				break;
 			}
 			if (isDataView(list) || i in list) {
@@ -2366,17 +2366,22 @@ function printListItems(list, config, indentation, depth, refs, printer) {
 * with spacing, indentation, and comma
 * without surrounding punctuation (for example, braces)
 */
-function printObjectProperties(val, config, indentation, depth, refs, printer) {
+function printObjectProperties(val, config, indentation, depth, refs, printer, compareKeysOverride = config.compareKeys) {
 	let result = "";
-	const keys = getKeysOfEnumerableProperties(val, config.compareKeys);
+	const keys = getKeysOfEnumerableProperties(val, compareKeysOverride);
 	if (keys.length > 0) {
 		result += config.spacingOuter;
 		const indentationNext = indentation + config.indent;
 		for (let i = 0; i < keys.length; i++) {
+			result += indentationNext;
+			if (i === config.maxWidth) {
+				result += `…(${keys.length - i})`;
+				break;
+			}
 			const key = keys[i];
-			const name = printer(key, config, indentationNext, depth, refs);
+			const name = !config.quoteKeys && isUnquotableKey(key) ? key : printer(key, config, indentationNext, depth, refs);
 			const value = printer(val[key], config, indentationNext, depth, refs);
-			result += `${indentationNext + name}: ${value}`;
+			result += `${name}: ${value}`;
 			if (i < keys.length - 1) {
 				result += `,${config.spacingInner}`;
 			} else if (!config.min) {
@@ -2387,6 +2392,12 @@ function printObjectProperties(val, config, indentation, depth, refs, printer) {
 	}
 	return result;
 }
+// https://github.com/nodejs/node/blob/61102cdbb3d59155ad5bb4fc9419627a31e63f7a/lib/internal/util/inspect.js#L249
+// /^[a-zA-Z_][a-zA-Z_0-9]*$/
+const keyStrRegExp = /^[a-z_]\w*$/i;
+function isUnquotableKey(key) {
+	return typeof key === "string" && key !== "__proto__" && keyStrRegExp.test(key);
+}
 
 const asymmetricMatcher = typeof Symbol === "function" && Symbol.for ? Symbol.for("jest.asymmetricMatcher") : 1267621;
 const SPACE$2 = " ";
@@ -2463,7 +2474,7 @@ function printProps(keys, props, config, indentation, depth, refs, printer) {
 	return keys.map((key) => {
 		const value = props[key];
 		// hidden injected value that should not be printed
-		if (typeof value === "string" && value[0] === "_" && value.startsWith("__vitest_") && value.match(/__vitest_\d+__/)) {
+		if (typeof value === "string" && value[0] === "_" && value.startsWith("__vitest_") && /__vitest_\d+__/.test(value)) {
 			return "";
 		}
 		let printed = printer(value, config, indentationNext, depth, refs);
@@ -2561,7 +2572,7 @@ const plugin$3 = {
 	test: test$3
 };
 
-// SENTINEL constants are from https://github.com/facebook/immutable-js
+// SENTINEL constants are from https://github.com/immutable-js/immutable-js
 const IS_ITERABLE_SENTINEL = "@@__IMMUTABLE_ITERABLE__@@";
 const IS_LIST_SENTINEL = "@@__IMMUTABLE_LIST__@@";
 const IS_KEYED_SENTINEL = "@@__IMMUTABLE_KEYED__@@";
@@ -2608,7 +2619,9 @@ function printImmutableSeq(val, config, indentation, depth, refs, printer) {
 		return printAsLeaf(name);
 	}
 	if (val[IS_KEYED_SENTINEL]) {
-		return `${name + SPACE}{${val._iter || val._object ? printIteratorEntries(val.entries(), config, indentation, depth, refs, printer) : LAZY}}`;
+		return `${name + SPACE}{${
+		// from Immutable collection of entries or from ECMAScript object
+		val._iter || val._object ? printIteratorEntries(val.entries(), config, indentation, depth, refs, printer) : LAZY}}`;
 	}
 	return `${name + SPACE}[${val._iter || val._array || val._collection || val._iterable ? printIteratorValues(val.values(), config, indentation, depth, refs, printer) : LAZY}]`;
 }
@@ -2991,7 +3004,7 @@ function printError(val) {
 * The first port of call for printing an object, handles most of the
 * data-types in JS.
 */
-function printBasicValue(val, printFunctionName, escapeRegex, escapeString) {
+function printBasicValue(val, printFunctionName, escapeRegex, escapeString, singleQuote) {
 	if (val === true || val === false) {
 		return `${val}`;
 	}
@@ -3009,10 +3022,15 @@ function printBasicValue(val, printFunctionName, escapeRegex, escapeString) {
 		return printBigInt(val);
 	}
 	if (typeOf === "string") {
+		const q = singleQuote ? "'" : "\"";
 		if (escapeString) {
-			return `"${val.replaceAll(/"|\\/g, "\\$&")}"`;
+			// escape quote in each case, e.g.
+			//   it's me -> 'it\'s me'
+			//   say "hi" -> "say \"hi\""
+			const escapePattern = singleQuote ? /['\\]/g : /["\\]/g;
+			return `${q}${val.replaceAll(escapePattern, "\\$&")}${q}`;
 		}
-		return `"${val}"`;
+		return `${q}${val}${q}`;
 	}
 	if (typeOf === "function") {
 		return printFunction(val, printFunctionName);
@@ -3071,17 +3089,17 @@ function printComplexValue(val, config, indentation, depth, refs, hasCalledToJSO
 		return hitMaxDepth ? "[Arguments]" : `${min ? "" : "Arguments "}[${printListItems(val, config, indentation, depth, refs, printer)}]`;
 	}
 	if (isToStringedArrayType(toStringed)) {
-		return hitMaxDepth ? `[${val.constructor.name}]` : `${min ? "" : !config.printBasicPrototype && val.constructor.name === "Array" ? "" : `${val.constructor.name} `}[${printListItems(val, config, indentation, depth, refs, printer)}]`;
+		return hitMaxDepth ? `[${val.constructor.name}]` : `${!config.printBasicPrototype && val.constructor.name === "Array" ? "" : `${val.constructor.name} `}[${printListItems(val, config, indentation, depth, refs, printer)}]`;
 	}
 	if (toStringed === "[object Map]") {
-		return hitMaxDepth ? "[Map]" : `Map {${printIteratorEntries(val.entries(), config, indentation, depth, refs, printer, " => ")}}`;
+		return hitMaxDepth ? "[Map]" : `Map {${printIteratorEntries(val.entries(), config, indentation, depth, refs, printer, " => ", val.size)}}`;
 	}
 	if (toStringed === "[object Set]") {
-		return hitMaxDepth ? "[Set]" : `Set {${printIteratorValues(val.values(), config, indentation, depth, refs, printer)}}`;
+		return hitMaxDepth ? "[Set]" : `Set {${printIteratorValues(val.values(), config, indentation, depth, refs, printer, val.size)}}`;
 	}
 	// Avoid failure to serialize global window object in jsdom test environment.
 	// For example, not even relevant if window is prop of React element.
-	return hitMaxDepth || isWindow(val) ? `[${getConstructorName$1(val)}]` : `${min ? "" : !config.printBasicPrototype && getConstructorName$1(val) === "Object" ? "" : `${getConstructorName$1(val)} `}{${printObjectProperties(val, config, indentation, depth, refs, printer)}}`;
+	return hitMaxDepth || isWindow(val) ? `[${getConstructorName$1(val)}]` : `${!config.printBasicPrototype && getConstructorName$1(val) === "Object" ? "" : `${getConstructorName$1(val)} `}{${printObjectProperties(val, config, indentation, depth, refs, printer)}}`;
 }
 const ErrorPlugin = {
 	test: (val) => val && val instanceof Error,
@@ -3099,7 +3117,7 @@ const ErrorPlugin = {
 			...rest
 		};
 		const name = val.name !== "Error" ? val.name : getConstructorName$1(val);
-		return hitMaxDepth ? `[${name}]` : `${name} {${printIteratorEntries(Object.entries(entries).values(), config, indentation, depth, refs, printer)}}`;
+		return hitMaxDepth ? `[${name}]` : `${name} {${printObjectProperties(entries, config, indentation, depth, refs, printer, null)}}`;
 	}
 };
 function isNewPlugin(plugin) {
@@ -3142,7 +3160,7 @@ function printer(val, config, indentation, depth, refs, hasCalledToJSON) {
 	if (plugin !== null) {
 		result = printPlugin(plugin, val, config, indentation, depth, refs);
 	} else {
-		const basicResult = printBasicValue(val, config.printFunctionName, config.escapeRegex, config.escapeString);
+		const basicResult = printBasicValue(val, config.printFunctionName, config.escapeRegex, config.escapeString, config.singleQuote);
 		if (basicResult !== null) {
 			result = basicResult;
 		} else {
@@ -3178,6 +3196,8 @@ const DEFAULT_OPTIONS = {
 	highlight: false,
 	indent: 2,
 	maxDepth: Number.POSITIVE_INFINITY,
+	// Practical default hard-limit to avoid too long string being generated
+	// (Node's limit is buffer.constants.MAX_STRING_LENGTH ~ 512MB)
 	maxOutputLength: 1e6,
 	maxWidth: Number.POSITIVE_INFINITY,
 	min: false,
@@ -3185,7 +3205,11 @@ const DEFAULT_OPTIONS = {
 	printBasicPrototype: true,
 	printFunctionName: true,
 	printShadowRoot: true,
-	theme: DEFAULT_THEME
+	theme: DEFAULT_THEME,
+	singleQuote: false,
+	quoteKeys: true,
+	spacingInner: "\n",
+	spacingOuter: "\n"
 };
 function validateOptions(options) {
 	for (const key of Object.keys(options)) {
@@ -3239,11 +3263,13 @@ function getConfig(options) {
 		maxWidth: options?.maxWidth ?? DEFAULT_OPTIONS.maxWidth,
 		min: options?.min ?? DEFAULT_OPTIONS.min,
 		plugins: options?.plugins ?? DEFAULT_OPTIONS.plugins,
-		printBasicPrototype: options?.printBasicPrototype ?? true,
+		printBasicPrototype: options?.printBasicPrototype ?? !options?.min,
 		printFunctionName: getPrintFunctionName(options),
 		printShadowRoot: options?.printShadowRoot ?? true,
-		spacingInner: options?.min ? " " : "\n",
-		spacingOuter: options?.min ? "" : "\n",
+		spacingInner: options?.spacingInner ?? (options?.min ? " " : "\n"),
+		spacingOuter: options?.spacingOuter ?? (options?.min ? "" : "\n"),
+		singleQuote: options?.singleQuote ?? DEFAULT_OPTIONS.singleQuote,
+		quoteKeys: options?.quoteKeys ?? DEFAULT_OPTIONS.quoteKeys,
 		maxOutputLength: options?.maxOutputLength ?? DEFAULT_OPTIONS.maxOutputLength,
 		_outputLengthPerDepth: []
 	};
@@ -3259,18 +3285,17 @@ function createIndent(indent) {
 function format(val, options) {
 	if (options) {
 		validateOptions(options);
-		if (options.plugins) {
-			const plugin = findPlugin(options.plugins, val);
-			if (plugin !== null) {
-				return printPlugin(plugin, val, getConfig(options), "", 0, []);
-			}
-		}
 	}
-	const basicResult = printBasicValue(val, getPrintFunctionName(options), getEscapeRegex(options), getEscapeString(options));
+	const config = getConfig(options);
+	const plugin = findPlugin(config.plugins, val);
+	if (plugin !== null) {
+		return printPlugin(plugin, val, config, "", 0, []);
+	}
+	const basicResult = printBasicValue(val, config.printFunctionName, config.escapeRegex, config.escapeString, config.singleQuote);
 	if (basicResult !== null) {
 		return basicResult;
 	}
-	return printComplexValue(val, getConfig(options), "", 0, []);
+	return printComplexValue(val, config, "", 0, []);
 }
 const plugins = {
 	AsymmetricMatcher: plugin$5,
@@ -8943,6 +8968,7 @@ function eq(a, b, aStack, bStack, customTesters, hasKey) {
 			// of `NaN` are equivalent.
 			return numA === numB || Number.isNaN(numA) && Number.isNaN(numB);
 		}
+		// RegExps are compared by their source patterns and flags.
 		case "[object RegExp]": return a.source === b.source && a.flags === b.flags;
 		case "[object Temporal.Instant]":
 		case "[object Temporal.ZonedDateTime]":
@@ -9055,7 +9081,13 @@ if (!Object.hasOwn(globalThis, MATCHERS_OBJECT)) {
 	const matchers = Object.create(null);
 	const customEqualityTesters = [];
 	const asymmetricMatchers = Object.create(null);
-	Object.defineProperty(globalThis, MATCHERS_OBJECT, { get: () => globalState });
+	// `configurable` so that vm pools can strip the accessors from a disposed
+	// context: the getters capture the expect state, which would otherwise keep
+	// the whole test-file world reachable from the leaked context shell
+	Object.defineProperty(globalThis, MATCHERS_OBJECT, {
+		configurable: true,
+		get: () => globalState
+	});
 	Object.defineProperty(globalThis, JEST_MATCHERS_OBJECT, {
 		configurable: true,
 		get: () => ({
@@ -9064,7 +9096,10 @@ if (!Object.hasOwn(globalThis, MATCHERS_OBJECT)) {
 			customEqualityTesters
 		})
 	});
-	Object.defineProperty(globalThis, ASYMMETRIC_MATCHERS_OBJECT, { get: () => asymmetricMatchers });
+	Object.defineProperty(globalThis, ASYMMETRIC_MATCHERS_OBJECT, {
+		configurable: true,
+		get: () => asymmetricMatchers
+	});
 }
 
 const KEYS_TO_HANDLE = ["oneOf", "anyOf", "allOf", "not", "$ref"];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopware/api-gen",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "description": "Shopware CLI for API client generation.",
   "author": "Shopware",
   "type": "module",
@@ -37,11 +37,13 @@
   "devDependencies": {
     "@types/yargs": "17.0.35",
     "@typescript/native-preview": "7.0.0-dev.20260205.1",
-    "@vitest/coverage-v8": "4.1.10",
+    "@vitest/coverage-v8": "5.0.0",
+    "@vitest/expect": "5.0.0",
+    "@vitest/utils": "5.0.0",
     "json5": "2.2.3",
     "picocolors": "1.1.1",
     "unbuild": "3.6.1",
-    "vitest": "4.1.10",
+    "vitest": "5.0.0",
     "tsconfig": "0.0.0"
   },
   "dependencies": {
@@ -51,7 +53,7 @@
     "ts-morph": "27.0.2",
     "typescript": "5.9.3",
     "yargs": "18.0.0",
-    "@shopware/api-client": "1.6.0"
+    "@shopware/api-client": "1.7.0"
   },
   "scripts": {
     "build": "unbuild",